Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa
File:                     740a0817-3d71-360d-aa31-2c01a2137f14.roa (raw, json)
Hash identifier:          kZjuWxswzAzcr1hgPnzYc3bvYlO1K+YUannAEpL4oeg=
Subject key identifier:   4A:FD:75:22:95:EF:DE:5D:31:6E:71:D1:C0:B7:58:A5:D8:C6:AF:E4
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F4328584838855F4F1DF9A08AD04C4500
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2607:aa40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5f:4f:1d:f9:a0:8a:d0:4c:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=9d1a4354-901d-4f02-8fd5-e03f15157b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:26:3b:df:14:1c:c0:6f:8a:27:09:41:c5:
                    1f:e5:1b:ad:12:86:10:2c:8c:10:2f:fd:6a:1b:a7:
                    a7:8c:55:47:86:f0:b1:03:c3:f8:52:5b:b6:25:8b:
                    73:2b:b3:9e:fc:67:b9:1a:90:ed:18:0d:7b:13:40:
                    c8:af:3f:a9:b6:51:f1:11:71:22:ef:03:da:bc:c2:
                    28:01:97:14:09:10:5e:28:fd:da:bf:b1:a9:1d:b4:
                    c0:7d:9b:d2:fc:7f:3e:b6:05:6a:e0:6c:a4:1c:dc:
                    cf:05:f3:38:9c:28:20:6f:6f:22:1a:2c:f6:da:c1:
                    87:e5:53:5d:b8:52:77:af:21:6c:44:ac:bc:95:81:
                    e6:5a:cf:d1:fa:fe:30:dd:da:13:56:c7:ac:ca:5d:
                    db:41:43:b2:ea:67:53:6f:3e:9b:55:70:e1:04:11:
                    9c:32:ce:3b:29:2f:3a:56:21:00:12:ee:59:f9:9a:
                    7e:1c:05:fb:8d:93:aa:76:b8:a6:9d:26:eb:21:66:
                    b1:f0:79:9d:d8:7c:22:cd:41:4b:c2:de:b7:13:94:
                    f2:89:a1:96:03:07:38:4c:18:a7:45:58:73:bb:b2:
                    16:45:03:a7:7f:0c:ba:55:fe:c8:d8:6f:4d:49:79:
                    d8:7b:b3:f5:e8:d9:37:9d:71:3f:b4:b0:79:08:32:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FD:75:22:95:EF:DE:5D:31:6E:71:D1:C0:B7:58:A5:D8:C6:AF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:35:c8:65:c0:33:31:70:e5:44:48:41:8c:d3:7c:b0:22:
         7e:58:5a:aa:c8:00:31:2d:a0:0f:85:e4:91:e8:eb:54:07:fa:
         c2:f2:15:fe:b3:da:1c:8f:80:e8:1d:5b:b5:8d:0b:80:ed:4d:
         9c:18:e0:47:78:f9:52:83:79:43:51:93:b3:4d:9f:54:82:bb:
         42:ef:38:4c:01:67:4c:d8:d0:39:3c:8e:be:f2:bd:95:e0:60:
         f0:08:80:b9:97:ee:37:73:2f:58:bd:0b:8f:92:7c:e9:2a:3d:
         19:c7:60:4b:94:d2:5b:81:ad:de:ac:55:e0:f8:44:e8:fb:61:
         82:bc:93:c2:7b:6b:a0:b1:12:06:65:31:ee:9a:99:ca:a1:42:
         7c:53:50:68:94:5c:9f:85:b9:fe:4a:93:45:87:b5:1a:95:3d:
         7d:a1:0d:e4:ab:70:48:b1:4f:dc:e1:5c:fb:38:56:fe:15:76:
         16:fa:b2:b3:89:91:14:d8:86:0c:16:66:a3:9c:d9:18:82:20:
         5a:c9:e0:6e:28:ca:bb:b5:a5:63:17:a4:e2:07:02:b1:1a:17:
         54:84:e4:e7:c2:f5:f2:01:df:79:d3:b4:95:05:ff:84:96:34:
         d0:61:59:bb:fb:ed:45:7e:98:fe:a2:03:13:b5:25:25:97:84:
         bf:62:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----